NVD

Id
79428  
Name
CVE-2002-0422  
Description
IIS 5 and 5.1 supporting WebDAV methods allows remote attackers to determine the internal IP address of the system (which may be obscured by NAT) via (1) a PROPFIND HTTP request with a blank Host header, which leaks the address in an HREF property in a 207 Multi-Status response, or (2) via the WRITE or MKCOL method, which leaks the IP in the Location server header.  
Reject
 
CVSS Version
2  
CVSS Score
2.6  
Severity
Low  
CVSS Base Score
2.6  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-05  
Published
2002-08-12  
Modified Date
2016-10-17  
Seq
2002-0422  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
396377 79428 CVE-2002-0422 20020305 IIS Internal IP Address Disclosure (#NISR05032002B)  View
396378 79428 CVE-2002-0422 20020305 IIS Internal IP Address Disclosure (#NISR05032002B)  View
396379 79428 CVE-2002-0422 iis-request-ip-disclosure(8385)  View

Related JVN